OpenBTS (1 part) - First acquaintance

OpenBTS uses GNURadio software to create a GSM radio interface to support 2G GSM mobile devices and uses the SIP switch protocol or PBX to connect calls. You could even say that this is OpenBTS a simplified form of IMS that works with 2G-functional phones. The combination of the global GSM standard with an inexpensive VoIP connection forms the basis for a new type of cellular network that can be deployed and operated at a significantly lower cost than existing technologies in many applications. An example of this use is the deployment of OpenBTS in rural areas or private cellular networks in remote areas.

Story
The project was launched by Harvind Samra and David A. Burgess. And initially their main task was to reduce the price of GSM services in poor countries and regions , as well as the ability to quickly create their own mobile network in areas remote from civilization.
Gradually, the project began to focus more on private companies and commercial organizations in order to provide an internal mobile network.
It is also worth noting that the developers working on the project, during their early work on OpenBTS and related projects, were faced with the currently resolved issues of legal claims. In fact, this entailed that part of the low-level work (interaction) code with GSM was rewritten “from scratch”.
Benefits of Using OpenBTS
- security of the internal corporate OpenBTS network, which is transmitted via mobile devices from external mobile operators;
- the ability to set up your own mobile network in areas with poor mobile coverage;
- saving on mobile calls and text messages within the network
- the ability to connect to the network not only using mobile phones, but also when using other communication devices (analog phones, computers (skype), CRM systems)
- flexible adjustment to your own needs of the company or even specific subscribers and adding your own functionality to the system;
- creation of mobile mobile stations.
Hacker application of OpenBTS
- use in conjunction with the osmocom project ;
- Replacing an existing cell of a mobile operator;
- IMSI Catcher ;
- GSM jammer
- Capturing a specific subscriber by IMSI and disabling encryption;
- use for other projects for hacking mobile networks and testing their security.
Current developments
- GPRS Support
- A3-A8-A5 / 1 authentication and encryption
- Transfer support
- Roaming
- L3Rewrite
- Using OpenBTS 'transceiver to run OsmoBTS / OpenBSC network
OpenBTS-UMTS - is a Linux application that uses GNU Radio and is a UMTS network for any standard 3G UMTS phone or modem. It is based on the main OpenBTS project, where the MS or UE is treated as the IP of the endpoint at the network edge.
Interesting links
- OpenBTS project portal - the official Wikipedia of the OpenBTS project
- Old OpenBTS Wiki - Old Wikipedia version of the OpenBTS project
- Sylvain Munot, Intruders Using Calypso Phones - This presentation also shows the use of the Osmocom-BB as a transceiver for OpenBTS
- Software Radio / OpenBTS - The Well Tempered Hacker Ep 4
- TUTORIAL & DEMO OPENBTS BY TKJ PNJ 2011
- Official hardware for OpenBTS
- YateBTS Blog
PS Readers' opinions about the article and OpenBTS itself, feedback and comments are very interesting. As well as cooperation tips and suggestions for writing the following articles in the series, which will describe the practical application of OpenBTS.